last executing test programs: 6.790340566s ago: executing program 1 (id=7375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008"], 0x20}}, 0x0) 6.713774392s ago: executing program 1 (id=7382): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000002180)=[{0x0, 0x4}, {}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000002240)=[0x7fff]) 6.619666839s ago: executing program 1 (id=7388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x54}}, 0x0) 6.574926613s ago: executing program 1 (id=7391): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53c, &(0x7f00000025c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40087602, &(0x7f0000000040)) 5.951475814s ago: executing program 1 (id=7400): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 3.335323708s ago: executing program 1 (id=7438): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000bc0), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 3.112612916s ago: executing program 2 (id=7441): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r4, 0x65, 0x2, 0x0, 0x20001008) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240)={0x6, 0x3, 0x8, 0x7, 0x21}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x2, 0xb2cc575b459b5b33]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.190305882s ago: executing program 2 (id=7458): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) syz_emit_ethernet(0x48, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x12, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 2.047439803s ago: executing program 2 (id=7459): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006e80)=[{&(0x7f0000002440)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002480)="86", 0x1}], 0x1, &(0x7f0000002580)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) 1.282245856s ago: executing program 4 (id=7469): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r0) r1 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000000), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000002000000480000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44ae8a3a3641110bfc4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd5821124dcecb0c005d2a1bcf9436e101040000f73902ebcfcf49822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2ba7f1521b3ebb0cc52f49129b9b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e9623128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcb02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184e5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691e6e365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca7a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c05000000000000000c4736c81936315418f26770cca4e2f89800d18c2a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41fa7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b56d8db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09832d4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e4acd27dfa82cafc6b64b1f4659834aecbed6d44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c20680c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea2417952cf6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0fb5bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905906e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b7cbe066c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd084adfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1ac225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf667fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b133b249b800a34b0942d97b55d808c41ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d947ffff0000eb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57bdf4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70c0860c1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd5d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e666e80f34d0adad1e2116bc385f888405d48f0d386da0cc6068018e45772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8957176578f44ffb8895fbd4e2a757a4249a855632ca30e09789811bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000400008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3bfb41cb630343b32ee5f9329dcaf33be8c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d934927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e006f09f5173e260b82f80ae10adebbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded1ca0fbea5cbe54ee42fb6809317dc0b7587d9322f8cd09e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e64420f2f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b4306301855c89afe795d881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8b57a2a35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406ba14bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da8646dc1379d1aceb72fd929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b0755d6be5afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c4468a4808ae562a6bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0fa3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb70042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b576af95820540e1ac91a43954f0b1260fa3b351b5a424d2b2944866aff582486308aca33c9571d1938175737473eaba14c9818c05d57de4df75f08206c24f781a72f26159b0abf05a90364414c4be434323c0f1050494aed7d791966edcb89d555e9907222e9af2546f0d6f9e51d40e30c85bb10cef93aacbb2d1278ddfcb9c65fd6d55239b1b7097c262740c13c53937b6f11ca6d544789ad36df5721e198f3d7f3a70d987c534cd7ac8da762e6d8752637405ffc1399a79f6c266dda1593f18ea2fb93111c1416f5a07fd7d74f956b2f4f4f3e9bcc03613cfb2b89b42babeb5756a21af5d2f980f1eb505cee397fd4e2cf068804b31b8be623a04c103e0dd4f0c3626f6bffa8f9d597123da046692211f7ad0711469f4839d394ed227336c2394b9ba1c299e88bca4fd70723dcab03ed8de938a69c31cdb5dcc77df25bcae53d9f35125c9d19d6f948f29ed4cab2cff308f3d6230c0e1442f21163ed895e869bd37653abbf7ab3d48c15d8f4a99a1c84bfe7b76c0bb42cf72a1b871b6edf1ce441c720054ab2aaa9f1d7ce20f8827c967f61a4acffb1ffbe54dbf4b65f23f1e740412a6e90dbeaee4d177f7bd016ebf7aec4a80671f193d28eaf71043ca144f9dbdc8743d9dd16d17f87c8a84f66053460fa6de2a29c2ba81e4780689b03bb02c0249a645cb6282b91f7d0f412a823b81c8d6c39a4483efeaf68e6920255a38f3459b89eb3c1ebba6a1507dadd4e7bcbec4d5c6be67f2760ac557c71e79b79939d0f41ae12241b464390d2ff9c60d49c3cfb455ffa1a8cbe9df811bc8a917f2199884edcd83ff6978f9d1ddf702864330e896ef31c914685f74a4198d71b35fb3b6fe08d0bf6ede50ae5eea1633621f5b4ca1829d5525ff4e0b357e8dcc9026206d6ff395db6b034d6bdf697d0d05d79917684b1ba7153caee53f8769b72c566d8bf9545d857d6db6a9ad9f0d36d3bea290d73cbfd15044d245db5a8624a94555777cad157b12b98bbb1e4a71a3ca616c652fcf6c0354b96f20effea6bbbabe9287becc537db31fcca6216e63ac479f383a7de333167c0179b146806b71cbf473f05320a51373bcbf7cc2cde3e108bb8e2229ddb771c1bd8a0982cf85d01efcc572276f8dac8ce8cab40b409c8e9f9dc086ce70645d411be8563236eb1a5db6337e9d03c5cf3012eb1fe916038236df9cc3327fd0b4342f630e58d35fb5f635adcc92338f4d68ef91886b4392fd5b384600"/5323], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) close(r1) 1.203925382s ago: executing program 4 (id=7470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 1.203620472s ago: executing program 2 (id=7471): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180), 0x8}) 1.203505752s ago: executing program 2 (id=7472): r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0xfffffffffffffffe) epoll_pwait2(r0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)) 1.203344032s ago: executing program 4 (id=7473): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil) syz_emit_ethernet(0x48, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x12, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1.177794774s ago: executing program 4 (id=7475): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000600)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x400000000000004, 0x7) 1.161625225s ago: executing program 4 (id=7477): lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x7, 0x0, &(0x7f0000000480)) 1.134908338s ago: executing program 4 (id=7480): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$peeksig(0x15, r1, 0x0, &(0x7f0000000240)) 1.10985224s ago: executing program 0 (id=7482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01080000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021280011800a0001006c696d6974000000180002800c000140000000000000000008000440000023"], 0xac}}, 0x0) 1.055129915s ago: executing program 0 (id=7483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='H\v\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="54000100240001"], 0xb48}}, 0x0) 1.054655194s ago: executing program 0 (id=7484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 1.031797046s ago: executing program 0 (id=7485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) 999.701909ms ago: executing program 0 (id=7486): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x90) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 521.133188ms ago: executing program 3 (id=7495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 353.408531ms ago: executing program 2 (id=7496): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r4, 0x65, 0x2, 0x0, 0x20001008) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240)={0x6, 0x3, 0x8, 0x7, 0x21}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0xd0, 0x720d, 0x148, 0xd0, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x2, 0xb2cc575b459b5b33]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 297.693846ms ago: executing program 3 (id=7497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) 204.197044ms ago: executing program 3 (id=7498): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006e80)=[{&(0x7f0000002440)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002480)="86", 0x1}], 0x1, &(0x7f0000002580)=[@prinfo={0x18}], 0x18}], 0x1, 0x0) 184.685666ms ago: executing program 3 (id=7499): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180), 0x8}) 138.930809ms ago: executing program 0 (id=7500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000090a0101480000000000c791ec11000008000a40000000000900020073797a32000100000900010073797a300000000008000540000000025c000980580002800c000180080001400000009a0c000180080001400000006d0c00018008000140000000030c0001800800014000000007"], 0xc0}}, 0x0) 94.327513ms ago: executing program 3 (id=7501): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001500192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c100000000000224e0000", 0x58}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200), 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@getstats={0x1c, 0x5e, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x2}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4044811) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) syz_pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000001dc0)={0xffbfffff000, 0x400000000}) r4 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r4, 0x0) read(r3, &(0x7f0000000200)=""/1, 0x1) 0s ago: executing program 3 (id=7502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01080000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021280011800a0001006c696d6974000000180002800c000140000000000000000008000440000023"], 0xac}}, 0x0) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 365.629467][T22952] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 365.635792][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.645664][T22952] FAT-fs (loop1): Can't find a valid FAT filesystem [ 365.654764][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.654788][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.692684][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.703012][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.713481][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.716679][T22710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.732326][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.742928][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.753246][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.763741][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.773665][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.773681][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.794332][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.804859][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.814941][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.814962][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.814981][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815059][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815077][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815090][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815107][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815123][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815142][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815220][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815235][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815251][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815274][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815287][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815302][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815314][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.815346][T22710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.815361][T22710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.817809][T22710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.893643][T22966] loop2: detected capacity change from 0 to 256 [ 365.926217][T22710] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.967499][T22966] FAT-fs (loop2): Directory bread(block 64) failed [ 365.971131][T22710] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.982732][T22966] FAT-fs (loop2): Directory bread(block 65) failed [ 365.990737][T22710] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.004531][T22966] FAT-fs (loop2): Directory bread(block 66) failed [ 366.007702][T22710] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.014013][T22966] FAT-fs (loop2): Directory bread(block 67) failed [ 366.043133][T22969] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FR.]L3 index 0 [ 366.053361][T22966] FAT-fs (loop2): Directory bread(block 68) failed [ 366.101892][T22966] FAT-fs (loop2): Directory bread(block 69) failed [ 366.126173][T22966] FAT-fs (loop2): Directory bread(block 70) failed [ 366.134050][T22966] FAT-fs (loop2): Directory bread(block 71) failed [ 366.140715][T22966] FAT-fs (loop2): Directory bread(block 72) failed [ 366.147593][T22966] FAT-fs (loop2): Directory bread(block 73) failed [ 366.231806][T22966] syz.2.6844: attempt to access beyond end of device [ 366.231806][T22966] loop2: rw=2049, sector=1224, nr_sectors = 120 limit=256 [ 366.257862][T22986] loop3: detected capacity change from 0 to 128 [ 366.387055][T23006] bridge0: entered promiscuous mode [ 366.392310][T23006] bridge0: entered allmulticast mode [ 366.413527][T23015] loop2: detected capacity change from 0 to 128 [ 366.546237][T23041] loop4: detected capacity change from 0 to 128 [ 366.643248][T23056] loop4: detected capacity change from 0 to 1024 [ 366.653136][T23060] loop3: detected capacity change from 0 to 512 [ 366.670365][T23060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.670374][T23056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.711166][T23060] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.732092][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.737543][T23070] netlink: 'syz.2.6890': attribute type 3 has an invalid length. [ 366.749030][T23070] netlink: 'syz.2.6890': attribute type 3 has an invalid length. [ 366.811455][T23079] loop3: detected capacity change from 0 to 128 [ 366.850018][T22433] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /39/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 366.872686][T22433] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 366.896904][T22433] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /39/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 366.931758][T22433] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 366.962001][T22433] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /39/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 367.003324][T22433] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 367.027980][T23091] loop3: detected capacity change from 0 to 512 [ 367.047571][T22433] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /39/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 367.073427][T22433] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 367.099077][T22433] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /39/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 367.138746][T23091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.157286][T23091] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.183750][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.204417][T22433] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 367.524022][T23123] loop3: detected capacity change from 0 to 128 [ 367.593967][T23125] loop3: detected capacity change from 0 to 512 [ 367.626646][T23125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.640510][T23125] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.670382][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.724777][T23133] loop2: detected capacity change from 0 to 512 [ 367.734593][T23133] EXT4-fs: Ignoring removed mblk_io_submit option [ 367.741466][T23133] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 367.743747][T23135] loop3: detected capacity change from 0 to 1024 [ 367.754061][T23133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 367.764135][T23133] System zones: 1-12 [ 367.768517][T23133] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.6918: corrupted in-inode xattr: e_value size too large [ 367.769918][T23135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.783221][T23133] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.6918: couldn't read orphan inode 15 (err -117) [ 367.812407][T23133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.835783][ T29] audit: type=1400 audit(2000000192.960:16608): avc: denied { link } for pid=23132 comm="syz.2.6918" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 367.836884][T23133] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.6918: Unrecognised inode hash code 4 [ 367.880032][ T29] audit: type=1400 audit(2000000192.960:16609): avc: denied { rename } for pid=23132 comm="syz.2.6918" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.890776][T23133] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.6918: Corrupt directory, running e2fsck is recommended [ 367.944742][T23133] EXT4-fs warning (device loop2): dx_probe:832: inode #2: comm syz.2.6918: Unrecognised inode hash code 4 [ 367.956408][T23133] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.6918: Corrupt directory, running e2fsck is recommended [ 367.980563][T22403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.018609][T22433] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.039080][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.050295][T22194] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /88/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 368.073163][T22194] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 368.104737][T22194] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /88/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 368.137111][T22194] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 368.159411][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.162864][T22194] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /88/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 368.211775][T23147] loop1: detected capacity change from 0 to 128 [ 368.234774][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.252440][T22194] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 368.313552][T23154] loop0: detected capacity change from 0 to 512 [ 368.333751][T22194] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /88/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 368.362916][T22194] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 368.387164][T22194] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /88/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 368.413146][T22194] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 368.455471][T23154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.470829][T23154] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.493491][T22710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.770768][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.851468][ T64] bridge_slave_1: left allmulticast mode [ 368.857186][ T64] bridge_slave_1: left promiscuous mode [ 368.862803][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.870731][ T64] bridge_slave_0: left allmulticast mode [ 368.876430][ T64] bridge_slave_0: left promiscuous mode [ 368.882032][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.027427][T22194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.057937][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.069393][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.081034][ T64] bond0 (unregistering): Released all slaves [ 369.142750][T23148] chnl_net:caif_netlink_parms(): no params data found [ 369.181728][T23148] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.188916][T23148] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.196775][T23148] bridge_slave_0: entered allmulticast mode [ 369.203221][T23148] bridge_slave_0: entered promiscuous mode [ 369.212572][ T64] hsr_slave_0: left promiscuous mode [ 369.218302][ T64] hsr_slave_1: left promiscuous mode [ 369.224195][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.231702][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.239664][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.247186][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.257430][ T64] veth1_macvtap: left promiscuous mode [ 369.262902][ T64] veth0_macvtap: left promiscuous mode [ 369.268525][ T64] veth1_vlan: left promiscuous mode [ 369.273748][ T64] veth0_vlan: left promiscuous mode [ 369.375034][ T64] team0 (unregistering): Port device team_slave_1 removed [ 369.388175][ T64] team0 (unregistering): Port device team_slave_0 removed [ 369.433545][T23148] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.441028][T23148] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.448338][T23148] bridge_slave_1: entered allmulticast mode [ 369.455005][T23148] bridge_slave_1: entered promiscuous mode [ 369.476950][T23148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.488029][T23148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.508637][T23148] team0: Port device team_slave_0 added [ 369.515371][T23148] team0: Port device team_slave_1 added [ 369.532622][T23148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.539705][T23148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.566225][T23148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.577893][T23148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.584890][T23148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.610868][T23148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.679660][T23148] hsr_slave_0: entered promiscuous mode [ 369.696835][T23148] hsr_slave_1: entered promiscuous mode [ 369.711392][ T29] audit: type=1400 audit(2000000194.830:16610): avc: denied { accept } for pid=23188 comm="syz.2.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 369.731507][T23148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.741650][T23148] Cannot create hsr debugfs directory [ 369.863241][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.887728][T23201] loop1: detected capacity change from 0 to 512 [ 369.894914][T23201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.907376][T23201] EXT4-fs (loop1): orphan cleanup on readonly fs [ 369.914413][T23201] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6936: bg 0: block 248: padding at end of block bitmap is not set [ 369.933173][T23201] Quota error (device loop1): write_blk: dquota write failed [ 369.940612][T23201] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 369.947180][T23178] chnl_net:caif_netlink_parms(): no params data found [ 369.950841][T23201] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.6936: Failed to acquire dquot type 1 [ 369.972309][T23201] EXT4-fs (loop1): 1 truncate cleaned up [ 369.978950][T23201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.993093][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.034468][T23178] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.041647][T23178] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.049225][T23178] bridge_slave_0: entered allmulticast mode [ 370.055943][T23178] bridge_slave_0: entered promiscuous mode [ 370.066079][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.078277][T23178] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.085551][T23178] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.093100][T23178] bridge_slave_1: entered allmulticast mode [ 370.099971][T23178] bridge_slave_1: entered promiscuous mode [ 370.130323][T23178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.145880][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.159182][T23178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.182906][T23178] team0: Port device team_slave_0 added [ 370.189645][T23178] team0: Port device team_slave_1 added [ 370.211534][T23178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.218627][T23178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.244941][T23178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.257198][T23178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.264163][T23178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.290665][T23178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.331590][T23178] hsr_slave_0: entered promiscuous mode [ 370.338313][T23178] hsr_slave_1: entered promiscuous mode [ 370.344368][T23178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.352110][T23178] Cannot create hsr debugfs directory [ 370.388300][T22525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.400878][ T64] bridge_slave_1: left allmulticast mode [ 370.406718][ T64] bridge_slave_1: left promiscuous mode [ 370.412417][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.420429][ T64] bridge_slave_0: left allmulticast mode [ 370.426222][ T64] bridge_slave_0: left promiscuous mode [ 370.431835][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.504735][T23212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6937'. [ 370.519643][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.530665][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.542265][ T64] bond0 (unregistering): Released all slaves [ 370.582314][T23148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.602444][T23148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.622344][T23148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.660061][ T64] hsr_slave_0: left promiscuous mode [ 370.665965][ T64] hsr_slave_1: left promiscuous mode [ 370.671913][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.679933][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.687774][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.695392][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.706109][ T64] veth1_macvtap: left promiscuous mode [ 370.711666][ T64] veth0_macvtap: left promiscuous mode [ 370.717306][ T64] veth1_vlan: left promiscuous mode [ 370.722549][ T64] veth0_vlan: left promiscuous mode [ 370.813704][T23236] netlink: 'syz.0.6944': attribute type 2 has an invalid length. [ 370.825342][ T64] team0 (unregistering): Port device team_slave_1 removed [ 370.838662][ T64] team0 (unregistering): Port device team_slave_0 removed [ 370.882802][T23148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.902847][T23235] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 370.983162][T23148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.985411][T23246] loop2: detected capacity change from 0 to 128 [ 370.996833][T23246] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 371.010863][T23246] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 371.013122][T23148] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.032224][T23246] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz.2.6951: No space for directory leaf checksum. Please run e2fsck -D. [ 371.035244][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.047760][T23246] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #11: comm syz.2.6951: checksumming directory block 0 [ 371.054697][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.086460][T22403] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.100805][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.107977][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.184688][T23148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.283734][T23178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.294754][T23178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.304745][T23178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 371.321772][T23178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 371.330230][T23273] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 371.361425][T23273] netlink: 'syz.2.6958': attribute type 2 has an invalid length. [ 371.392096][T23148] veth0_vlan: entered promiscuous mode [ 371.403191][T23282] loop2: detected capacity change from 0 to 128 [ 371.410697][T23282] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 371.412105][T23148] veth1_vlan: entered promiscuous mode [ 371.434535][T23178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.436123][T23282] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 371.458257][T23178] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.459540][T23282] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:405: inode #11: comm syz.2.6960: No space for directory leaf checksum. Please run e2fsck -D. [ 371.478015][T23148] veth0_macvtap: entered promiscuous mode [ 371.481038][T23282] EXT4-fs error (device loop2): __ext4_find_entry:1695: inode #11: comm syz.2.6960: checksumming directory block 0 [ 371.508379][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.515542][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.526820][T22403] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 371.539165][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.546270][ T5237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.573172][T23148] veth1_macvtap: entered promiscuous mode [ 371.613289][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.623873][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.633788][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.644428][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.653959][T23295] loop2: detected capacity change from 0 to 512 [ 371.654305][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.671006][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.680898][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.691441][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.701398][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.705588][T23295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 371.711928][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.730188][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.740569][T23295] EXT4-fs (loop2): orphan cleanup on readonly fs [ 371.740726][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.757001][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.758420][T23295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6966: bg 0: block 248: padding at end of block bitmap is not set [ 371.767425][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.767448][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.767471][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.767491][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.822704][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.832560][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.843045][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.853135][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.863668][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.873499][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.884051][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.898465][T23148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.906053][T23295] Quota error (device loop2): write_blk: dquota write failed [ 371.911654][T23178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.913602][T23295] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 371.933857][T23295] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.6966: Failed to acquire dquot type 1 [ 371.970984][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.977661][T23295] EXT4-fs (loop2): 1 truncate cleaned up [ 371.981573][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.997183][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.007973][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.017830][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.028278][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.038159][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.048695][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.058635][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.069132][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.078945][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.089571][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.099398][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.109932][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.121781][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.133050][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.142876][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.153303][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.163212][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.173640][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.183555][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.193978][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.203832][T23148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.214346][T23148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.225488][T23295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.227034][T23148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.252000][T23148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.260953][T23148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.270204][T23148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.279096][T23148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.304436][T23178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.384086][ T29] audit: type=1400 audit(2000000197.500:16611): avc: denied { write } for pid=23321 comm="syz.4.6922" name="net" dev="proc" ino=101712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 372.406326][ T29] audit: type=1400 audit(2000000197.500:16612): avc: denied { add_name } for pid=23321 comm="syz.4.6922" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 372.425611][T23178] veth0_vlan: entered promiscuous mode [ 372.426766][ T29] audit: type=1400 audit(2000000197.500:16613): avc: denied { create } for pid=23321 comm="syz.4.6922" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 372.441134][T23178] veth1_vlan: entered promiscuous mode [ 372.485994][T23178] veth0_macvtap: entered promiscuous mode [ 372.499476][T23178] veth1_macvtap: entered promiscuous mode [ 372.515734][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.526511][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.536420][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.546877][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.556717][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.567166][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.577013][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.587556][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.597437][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.607878][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.617828][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.628307][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.638231][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.648727][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.658541][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.669034][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.678880][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.689360][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.699178][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.709625][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.719447][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.730025][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.739846][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.750283][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.760649][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.771351][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.782710][T23178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.794591][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.805125][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.815471][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.826419][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.836272][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.846929][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.856809][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.867540][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.877523][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.888083][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.897998][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.908431][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.918559][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.929007][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.938862][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.949728][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.959564][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.970016][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.979941][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.990459][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.000382][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.012247][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.022091][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.032539][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.042367][T23178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.052797][T23178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.065039][T22403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.067120][T23178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.091632][T23178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.100547][T23178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.109298][T23178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.118104][T23178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.152979][T23331] program syz.2.6972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.250892][T23345] loop4: detected capacity change from 0 to 256 [ 373.259614][T23345] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.348066][T23356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.360295][T23356] netlink: 'syz.1.6984': attribute type 1 has an invalid length. [ 373.370832][T23356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.382525][T23356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.392543][T23356] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 373.413414][T23356] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 373.420142][T23356] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 373.427716][T23356] vhci_hcd vhci_hcd.0: Device attached [ 373.439550][T23358] vhci_hcd: connection closed [ 373.439884][ T63] vhci_hcd: stop threads [ 373.448987][ T63] vhci_hcd: release socket [ 373.453404][ T63] vhci_hcd: disconnect device [ 373.507654][T23363] program syz.0.6986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.616556][T23378] loop4: detected capacity change from 0 to 512 [ 373.979925][T23389] loop1: detected capacity change from 0 to 256 [ 373.988005][T23389] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.143639][T23402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7004'. [ 375.271605][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7018'. [ 375.941997][T23472] loop3: detected capacity change from 0 to 512 [ 376.303764][T23484] loop1: detected capacity change from 0 to 1024 [ 376.312938][T23484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.336911][T22525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.412078][T23495] bridge0: port 3(team0) entered blocking state [ 376.418551][T23495] bridge0: port 3(team0) entered disabled state [ 376.425508][T23495] team0: entered allmulticast mode [ 376.430707][T23495] team_slave_0: entered allmulticast mode [ 376.436871][T23495] team_slave_1: entered allmulticast mode [ 376.449467][T23495] team0: entered promiscuous mode [ 376.454590][T23495] team_slave_0: entered promiscuous mode [ 376.460420][T23495] team_slave_1: entered promiscuous mode [ 376.472336][T23495] bridge0: port 3(team0) entered blocking state [ 376.478684][T23495] bridge0: port 3(team0) entered forwarding state [ 376.533682][T23504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.549929][T23506] loop1: detected capacity change from 0 to 512 [ 376.565243][T23504] netlink: 'syz.4.7041': attribute type 1 has an invalid length. [ 376.589029][T23504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.617682][T23504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.640778][T23504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 376.668933][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 376.668952][ T29] audit: type=1400 audit(2000000201.780:16616): avc: denied { read } for pid=23514 comm="syz.0.7047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 376.689009][T23521] loop1: detected capacity change from 0 to 1024 [ 376.705313][T23504] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 376.711934][T23504] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 376.719499][T23504] vhci_hcd vhci_hcd.0: Device attached [ 376.739443][T23516] vhci_hcd: connection closed [ 376.741463][ T50] vhci_hcd: stop threads [ 376.750473][ T50] vhci_hcd: release socket [ 376.754891][ T50] vhci_hcd: disconnect device [ 376.772436][T23521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.796322][T22525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.988196][T23545] loop1: detected capacity change from 0 to 512 [ 377.003458][T23545] ext4: Unknown parameter 'euid<00000000000000000000' [ 377.115478][T23560] loop0: detected capacity change from 0 to 512 [ 377.140302][ T29] audit: type=1400 audit(2000000202.260:16617): avc: denied { accept } for pid=23558 comm="syz.1.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 377.212050][T23560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.259202][T23560] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.318960][T23560] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.7062: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 377.414237][T23572] bridge0: port 3(team0) entered blocking state [ 377.420617][T23572] bridge0: port 3(team0) entered disabled state [ 377.440689][T23560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 377.459717][T23572] team0: entered allmulticast mode [ 377.464904][T23572] team_slave_0: entered allmulticast mode [ 377.470705][T23572] team_slave_1: entered allmulticast mode [ 377.477710][T23560] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.7062: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 377.510914][T23572] team0: entered promiscuous mode [ 377.516165][T23572] team_slave_0: entered promiscuous mode [ 377.521863][T23572] team_slave_1: entered promiscuous mode [ 377.529881][T23572] bridge0: port 3(team0) entered blocking state [ 377.536309][T23572] bridge0: port 3(team0) entered forwarding state [ 377.546063][T23560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 377.636988][T22710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.689863][T23580] loop1: detected capacity change from 0 to 512 [ 377.697705][T23580] EXT4-fs: Ignoring removed nobh option [ 377.719633][T23580] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.744671][T23580] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.769616][T23580] EXT4-fs error (device loop1): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz.1.7071: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 377.823439][T23580] EXT4-fs (loop1): Remounting filesystem read-only [ 377.840050][T23606] loop0: detected capacity change from 0 to 128 [ 377.849333][ T29] audit: type=1326 audit(2000000202.970:16618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23609 comm="syz.2.7084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a81e94bd9 code=0x0 [ 377.873518][T22525] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 377.966650][T23622] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7092'. [ 377.975803][T23622] 0ªX¹¦D: renamed from gretap0 [ 377.982547][T23622] 0ªX¹¦D: entered allmulticast mode [ 377.987902][T23622] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 377.994215][T23631] loop0: detected capacity change from 0 to 1024 [ 378.019930][T23631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.029682][T23636] loop1: detected capacity change from 0 to 512 [ 378.045656][T23631] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz.0.7094: deleted inode referenced: 12 [ 378.072443][T23636] EXT4-fs: Ignoring removed nobh option [ 378.083895][T23645] loop3: detected capacity change from 0 to 128 [ 378.092447][T23631] EXT4-fs (loop0): Remounting filesystem read-only [ 378.122660][T23636] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.135345][T23636] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.152268][T23636] EXT4-fs error (device loop1): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz.1.7096: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 378.170569][T23652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7103'. [ 378.181966][T23636] EXT4-fs (loop1): Remounting filesystem read-only [ 378.201742][T22710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.212567][T22525] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 378.258719][T23668] loop4: detected capacity change from 0 to 128 [ 378.270501][T23671] loop3: detected capacity change from 0 to 512 [ 378.306691][T23671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.324092][T23671] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.337017][T23672] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7105'. [ 378.345993][T23672] 0ªX¹¦D: renamed from gretap0 [ 378.352753][T23672] 0ªX¹¦D: entered allmulticast mode [ 378.358716][T23672] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 378.366702][T23671] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.7112: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 378.392818][T23671] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 378.403319][T23671] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.7112: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 378.423403][T23671] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 378.447733][T23689] loop1: detected capacity change from 0 to 1024 [ 378.456124][T23689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.472924][T23689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.544964][T22525] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.576386][T23699] loop0: detected capacity change from 0 to 512 [ 378.583001][T23699] EXT4-fs: Ignoring removed nobh option [ 378.594872][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.613640][T23699] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.630108][T23699] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.649004][T23699] EXT4-fs error (device loop0): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz.0.7121: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 378.677877][T23699] EXT4-fs (loop0): Remounting filesystem read-only [ 378.707553][T23714] loop3: detected capacity change from 0 to 1024 [ 378.721627][T23714] EXT4-fs: Ignoring removed orlov option [ 378.727391][T23714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.735930][T23717] loop2: detected capacity change from 0 to 1024 [ 378.736689][T23711] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7126'. [ 378.742716][T23717] EXT4-fs: Ignoring removed i_version option [ 378.757627][T23711] 0ªX¹¦D: renamed from gretap0 [ 378.762578][T23717] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.772699][T23719] loop1: detected capacity change from 0 to 1024 [ 378.773154][T23711] 0ªX¹¦D: entered allmulticast mode [ 378.780401][T23719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.784350][T23711] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 378.801529][T23717] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 16: comm syz.2.7128: path /114/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=80 fake=0 [ 378.926958][ T29] audit: type=1326 audit(2000000204.050:16619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23734 comm="syz.4.7138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb06c4bd9 code=0x0 [ 378.980084][T23744] loop3: detected capacity change from 0 to 512 [ 378.989809][T23748] loop1: detected capacity change from 0 to 128 [ 378.994585][T23744] EXT4-fs: Ignoring removed nobh option [ 379.003559][T23748] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.051735][T23744] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.068649][T23744] EXT4-fs error (device loop3): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz.3.7140: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 379.070249][T23755] loop0: detected capacity change from 0 to 1024 [ 379.095786][T23744] EXT4-fs (loop3): Remounting filesystem read-only [ 379.097126][T23755] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.136199][T23759] loop1: detected capacity change from 0 to 1024 [ 379.142914][T23759] EXT4-fs: Ignoring removed i_version option [ 379.143363][T23759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.152987][T23759] EXT4-fs error (device loop1): ext4_read_inline_dir:1560: inode #12: block 16: comm syz.1.7143: path /65/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=80 fake=0 [ 379.199226][ T29] audit: type=1400 audit(2000000204.320:16620): avc: denied { accept } for pid=23762 comm="syz.3.7147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 379.265245][T23772] dccp_v6_rcv: dropped packet with invalid checksum [ 379.282949][T23772] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 379.293522][T23772] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 379.306979][T23781] loop1: detected capacity change from 0 to 512 [ 379.313637][T23781] EXT4-fs: Ignoring removed nobh option [ 379.334983][T23781] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.351848][T23781] EXT4-fs error (device loop1): ext4_generic_delete_entry:2676: inode #2: block 3: comm syz.1.7155: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 379.372479][T23781] EXT4-fs (loop1): Remounting filesystem read-only [ 379.459677][T23791] loop0: detected capacity change from 0 to 1024 [ 379.479135][T23791] EXT4-fs: Ignoring removed i_version option [ 379.498412][T23791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.519801][T23791] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 16: comm syz.0.7159: path /61/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=80 fake=0 [ 379.563410][T22710] EXT4-fs unmount: 18 callbacks suppressed [ 379.563430][T22710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.584174][T23811] loop3: detected capacity change from 0 to 164 [ 379.584410][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7166'. [ 379.620151][T23813] dccp_v6_rcv: dropped packet with invalid checksum [ 379.632692][T23813] siw: device registration error -23 [ 379.635188][T23811] loop3: detected capacity change from 164 to 0 [ 379.654972][T23811] syz.3.7168: attempt to access beyond end of device [ 379.654972][T23811] loop3: rw=0, sector=120, nr_sectors = 4 limit=0 [ 379.738944][T23829] loop3: detected capacity change from 0 to 1024 [ 379.748917][T23831] loop0: detected capacity change from 0 to 512 [ 379.758616][T23831] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.7177: corrupted in-inode xattr: invalid ea_ino [ 379.762968][T23829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.773435][T23831] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.7177: couldn't read orphan inode 15 (err -117) [ 379.803476][T23829] EXT4-fs (loop3): shut down requested (0) [ 379.810951][T23831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.817810][T23837] loop2: detected capacity change from 0 to 1024 [ 379.837284][T23837] EXT4-fs: Ignoring removed i_version option [ 379.844344][T23829] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 379.854614][T23831] EXT4-fs warning (device loop0): ext4_rename_delete:3738: inode #2: comm syz.0.7177: Deleting old file: nlink 4, error=-2 [ 379.854816][T23829] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 379.876460][T23837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.891979][T22710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.911137][T23829] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 379.912179][T23837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.925087][T23829] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=11 [ 379.941320][ T29] audit: type=1400 audit(2000000205.050:16621): avc: denied { rename } for pid=23827 comm="syz.3.7173" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.980120][T23837] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 16: comm syz.2.7178: path /117/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=301989902, rec_len=0, size=80 fake=0 [ 380.022649][ T29] audit: type=1400 audit(2000000205.090:16622): avc: denied { rmdir } for pid=23827 comm="syz.3.7173" name="file1" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.052232][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.069042][T23853] loop4: detected capacity change from 0 to 164 [ 380.074505][T22403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.105400][T23853] loop4: detected capacity change from 164 to 0 [ 380.112316][T23853] syz.4.7184: attempt to access beyond end of device [ 380.112316][T23853] loop4: rw=0, sector=120, nr_sectors = 4 limit=0 [ 380.124877][T23857] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7187'. [ 380.134420][T23857] 0ªX¹¦D: renamed from gretap0 [ 380.141692][T23857] 0ªX¹¦D: entered allmulticast mode [ 380.147006][T23857] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 380.446938][T23907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7211'. [ 380.463715][ T29] audit: type=1400 audit(2000000205.580:16623): avc: denied { listen } for pid=23906 comm="syz.2.7211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.565845][T12434] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.641235][T12434] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.689652][T12434] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.747744][T12434] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.781525][T23925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7212'. [ 380.867404][T12434] bridge_slave_1: left allmulticast mode [ 380.873101][T12434] bridge_slave_1: left promiscuous mode [ 380.878895][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.907918][T12434] bridge_slave_0: left allmulticast mode [ 380.913614][T12434] bridge_slave_0: left promiscuous mode [ 380.919379][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.033081][ T29] audit: type=1400 audit(2000000206.150:16624): avc: denied { setattr } for pid=23929 comm="syz.2.7218" name="001" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.079812][ T29] audit: type=1401 audit(2000000206.200:16625): op=fscreate invalid_context=8E [ 381.099116][T12434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.122655][T12434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.140655][T12434] bond0 (unregistering): Released all slaves [ 381.184280][T23944] usb usb5: usbfs: process 23944 (syz.2.7218) did not claim interface 0 before use [ 381.259884][T23944] usb usb5: selecting invalid altsetting 65654 [ 381.309874][T12434] hsr_slave_0: left promiscuous mode [ 381.336853][T12434] hsr_slave_1: left promiscuous mode [ 381.354926][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.362492][T12434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.389524][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.397440][T12434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.411378][T12434] veth1_macvtap: left promiscuous mode [ 381.411406][T12434] veth0_macvtap: left promiscuous mode [ 381.411501][T12434] veth1_vlan: left promiscuous mode [ 381.411683][T12434] veth0_vlan: left promiscuous mode [ 381.679943][T12434] team0 (unregistering): Port device team_slave_1 removed [ 381.708402][T12434] team0 (unregistering): Port device team_slave_0 removed [ 381.787816][T23916] chnl_net:caif_netlink_parms(): no params data found [ 381.908906][T23916] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.916146][T23916] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.929468][T23916] bridge_slave_0: entered allmulticast mode [ 381.939493][T23916] bridge_slave_0: entered promiscuous mode [ 381.993481][T23983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7236'. [ 381.995421][T23916] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.009684][T23916] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.035913][T23916] bridge_slave_1: entered allmulticast mode [ 382.042564][T23916] bridge_slave_1: entered promiscuous mode [ 382.097318][T23916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.172123][T23916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.243219][T23916] team0: Port device team_slave_0 added [ 382.257809][T23916] team0: Port device team_slave_1 added [ 382.359927][T23916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.367008][T23916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.393146][T23916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.397043][T24012] loop4: detected capacity change from 0 to 1024 [ 382.415460][T24012] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 382.437128][T23916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.444131][T23916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.460292][T24012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.470320][T23916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.504705][T12434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.516856][T23148] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.540848][T23962] chnl_net:caif_netlink_parms(): no params data found [ 382.571801][T23916] hsr_slave_0: entered promiscuous mode [ 382.587531][T23916] hsr_slave_1: entered promiscuous mode [ 382.593682][T23916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.601772][T23916] Cannot create hsr debugfs directory [ 382.650434][T12434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.741892][T12434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.785591][ C0] ------------[ cut here ]------------ [ 382.791116][ C0] WARNING: CPU: 0 PID: 22403 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x440/0x450 [ 382.800755][ C0] Modules linked in: [ 382.804679][ C0] CPU: 0 PID: 22403 Comm: syz-executor Tainted: G W 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 382.816570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 382.826705][ C0] RIP: 0010:inet_sock_destruct+0x440/0x450 [ 382.832558][ C0] Code: 0f 0b 90 e9 ab fe ff ff e8 bd 6b f6 fc 90 0f 0b 90 e9 c5 fe ff ff e8 af 6b f6 fc 90 0f 0b 90 e9 df fe ff ff e8 a1 6b f6 fc 90 <0f> 0b 90 e9 35 ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 382.852243][ C0] RSP: 0018:ffffc90000003e38 EFLAGS: 00010246 [ 382.858536][ C0] RAX: ffffffff8438652f RBX: 0000000000000400 RCX: ffff8881284c0000 [ 382.866573][ C0] RDX: 0000000000000100 RSI: 0000000000000400 RDI: 0000000000000000 [ 382.874677][ C0] RBP: ffff88810bb68000 R08: ffffffff84386460 R09: 0000000000000000 [ 382.882717][ C0] R10: 0001ffffffffffff R11: 000188810bb68160 R12: ffff88810bb682e8 [ 382.890755][ C0] R13: ffff88810bb682e8 R14: ffff88810bb68028 R15: ffff88810bb68012 [ 382.898774][ C0] FS: 0000555569550500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 382.907741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.914371][ C0] CR2: 00005555695504a8 CR3: 0000000139f40000 CR4: 00000000003506f0 [ 382.922404][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.930425][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 382.938450][ C0] Call Trace: [ 382.941747][ C0] [ 382.944628][ C0] ? __warn+0x13c/0x350 [ 382.948846][ C0] ? report_bug+0x315/0x420 [ 382.953429][ C0] ? inet_sock_destruct+0x440/0x450 [ 382.958691][ C0] ? handle_bug+0x3e/0x70 [ 382.963079][ C0] ? exc_invalid_op+0x1a/0x50 [ 382.967816][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 382.972884][ C0] ? inet_sock_destruct+0x370/0x450 [ 382.978227][ C0] ? inet_sock_destruct+0x43f/0x450 [ 382.979855][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 382.979871][ T29] audit: type=1400 audit(2000000207.910:16627): avc: denied { ioctl } for pid=24036 comm="syz.4.7255" path="socket:[104494]" dev="sockfs" ino=104494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 382.983464][ C0] ? inet_sock_destruct+0x440/0x450 [ 383.019783][ C0] ? inet_sock_destruct+0x43f/0x450 [ 383.025016][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 383.030200][ C0] inet6_sock_destruct+0x1d/0x30 [ 383.035189][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 383.040844][ C0] __sk_destruct+0x3d/0x440 [ 383.045412][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 383.050561][ C0] rcu_core+0x594/0xbf0 [ 383.054777][ C0] rcu_core_si+0xd/0x20 [ 383.059043][ C0] handle_softirqs+0xc3/0x280 [ 383.063787][ C0] irq_exit_rcu+0x3e/0x90 [ 383.068191][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 383.073851][ C0] [ 383.076812][ C0] [ 383.079748][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 383.085795][ C0] RIP: 0010:legitimize_links+0x0/0x220 [ 383.091328][ C0] Code: 04 89 ef 89 de e8 90 45 ca ff 31 c0 39 dd 0f 95 c0 5b 5d c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 20 49 89 fe e8 9a 43 ca ff [ 383.110992][ C0] RSP: 0018:ffffc900016bfb78 EFLAGS: 00000202 [ 383.117100][ C0] RAX: 0000000000000000 RBX: ffff888106838600 RCX: ffffffff81649162 [ 383.125120][ C0] RDX: ffff8881284c0000 RSI: 0000000000000040 RDI: ffffc900016bfd60 [ 383.133113][ C0] RBP: 0000000000000040 R08: ffffffff81649172 R09: 0000000000000000 [ 383.141136][ C0] R10: 0001ffffffffffff R11: 0001c900016bfd98 R12: ffffc900016bfd68 [ 383.149164][ C0] R13: ffffc900016bfd60 R14: ffff888106838600 R15: ffffc900016bfd98 [ 383.157198][ C0] ? try_to_unlazy+0x42/0x3b0 [ 383.161940][ C0] ? try_to_unlazy+0x32/0x3b0 [ 383.166686][ C0] try_to_unlazy+0x53/0x3b0 [ 383.171236][ C0] complete_walk+0xbd/0x1f0 [ 383.175792][ C0] path_openat+0x162d/0x1fa0 [ 383.180429][ C0] ? mntput+0x50/0x70 [ 383.184446][ C0] ? ptep_set_access_flags+0x3e/0x70 [ 383.189791][ C0] do_filp_open+0xf7/0x200 [ 383.194264][ C0] do_sys_openat2+0xab/0x120 [ 383.198904][ C0] __x64_sys_openat+0xf3/0x120 [ 383.203691][ C0] x64_sys_call+0x1057/0x2d70 [ 383.208434][ C0] do_syscall_64+0xc9/0x1c0 [ 383.212979][ C0] ? clear_bhb_loop+0x55/0xb0 [ 383.217750][ C0] ? clear_bhb_loop+0x55/0xb0 [ 383.222493][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.228487][ C0] RIP: 0033:0x7f6a81e944d1 [ 383.232915][ C0] Code: 44 24 18 31 c0 41 83 e2 40 75 3e 89 f0 25 00 00 41 00 3d 00 00 41 00 74 30 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 3f 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 383.252597][ C0] RSP: 002b:00007ffd30607eb0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 383.261053][ C0] RAX: ffffffffffffffda RBX: 00007f6a81f02515 RCX: 00007f6a81e944d1 [ 383.269074][ C0] RDX: 0000000000090800 RSI: 00007ffd30609090 RDI: 00000000ffffff9c [ 383.277116][ C0] RBP: 00007ffd3060905c R08: 000000002d06d7dc R09: 7fffffffffffffff [ 383.285132][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffd30609090 [ 383.293123][ C0] R13: 00007f6a81f02515 R14: 000000000005d6f6 R15: 000000000005d6ea [ 383.301178][ C0] [ 383.304431][ C0] ---[ end trace 0000000000000000 ]--- [ 383.338459][T12434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.350070][T23962] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.357223][T23962] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.364594][T23962] bridge_slave_0: entered allmulticast mode [ 383.371271][T23962] bridge_slave_0: entered promiscuous mode [ 383.378448][T23962] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.385743][T23962] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.396674][T23962] bridge_slave_1: entered allmulticast mode [ 383.403304][T23962] bridge_slave_1: entered promiscuous mode [ 383.412365][T24048] loop3: detected capacity change from 0 to 1024 [ 383.419466][T24048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.430940][T24048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.461187][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.484682][T23962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.498999][T23962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.531854][T24054] loop3: detected capacity change from 0 to 512 [ 383.539008][T24054] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 383.570142][T23962] team0: Port device team_slave_0 added [ 383.577014][T23962] team0: Port device team_slave_1 added [ 383.601983][T12434] team0: left allmulticast mode [ 383.606907][T12434] team_slave_0: left allmulticast mode [ 383.612404][T12434] team_slave_1: left allmulticast mode [ 383.617968][T12434] team0: left promiscuous mode [ 383.622729][T12434] team_slave_0: left promiscuous mode [ 383.622879][T12434] team_slave_1: left promiscuous mode [ 383.633727][T12434] bridge0: port 3(team0) entered disabled state [ 383.643603][T12434] bridge_slave_1: left allmulticast mode [ 383.649436][T12434] bridge_slave_1: left promiscuous mode [ 383.655248][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.663990][T12434] bridge_slave_0: left allmulticast mode [ 383.669703][T12434] bridge_slave_0: left promiscuous mode [ 383.675534][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.685821][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7265'. [ 383.705498][ T29] audit: type=1400 audit(2000000208.830:16628): avc: denied { read } for pid=24056 comm="syz.2.7261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.801394][T24071] loop3: detected capacity change from 0 to 128 [ 383.812237][T12434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.827037][T12434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.842710][T12434] bond0 (unregistering): Released all slaves [ 383.860932][T23962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.867955][T23962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.893927][T23962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.907755][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7265'. [ 383.923400][T23962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.930445][T23962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.956612][T23962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.987223][T23962] hsr_slave_0: entered promiscuous mode [ 383.993515][T23962] hsr_slave_1: entered promiscuous mode [ 384.000376][T23962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.010277][T23962] Cannot create hsr debugfs directory [ 384.040881][T12434] hsr_slave_0: left promiscuous mode [ 384.046774][T12434] hsr_slave_1: left promiscuous mode [ 384.052654][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.060181][T12434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.068292][T12434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.075839][T12434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.087485][T12434] veth1_macvtap: left promiscuous mode [ 384.093043][T12434] veth0_macvtap: left promiscuous mode [ 384.098653][T12434] veth1_vlan: left promiscuous mode [ 384.103902][T12434] veth0_vlan: left promiscuous mode [ 384.216085][T12434] team0 (unregistering): Port device team_slave_1 removed [ 384.226888][T12434] team0 (unregistering): Port device team_slave_0 removed [ 384.294520][T24091] loop3: detected capacity change from 0 to 512 [ 384.316454][T24091] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (6144 > 1280). [ 384.328282][T24091] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 384.343140][T24091] EXT4-fs (loop3): mount failed [ 384.418780][T23916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.430980][T23916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.441272][T23916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.451357][T23916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.507033][T23916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.522195][T23916] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.534788][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.541926][ T5238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.559384][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.566619][ T5238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.580605][T24104] loop2: detected capacity change from 0 to 512 [ 384.631345][T23916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.641894][T23916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.657962][T24104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 384.673276][T24104] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.806688][T22403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 384.823697][T23962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.845987][T23916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.866337][T23962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.880057][T23962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.897649][T23962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 385.031715][T23962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.065232][T23962] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.092766][T23916] veth0_vlan: entered promiscuous mode [ 385.103439][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.110531][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.126905][T23916] veth1_vlan: entered promiscuous mode [ 385.173800][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.181081][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.208182][T23916] veth0_macvtap: entered promiscuous mode [ 385.220579][T23962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.231019][T23962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.264267][T23916] veth1_macvtap: entered promiscuous mode [ 385.286002][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.296540][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.306396][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.316856][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.326889][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.337419][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.343813][ T29] audit: type=1400 audit(2000000210.460:16629): avc: denied { create } for pid=24152 comm="syz.2.7293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 385.347453][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.379068][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.389215][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.399726][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.409673][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.420129][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.430072][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.440522][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.450369][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.455140][ T29] audit: type=1400 audit(2000000210.500:16630): avc: denied { create } for pid=24152 comm="syz.2.7293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 385.460861][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.481319][ T29] audit: type=1400 audit(2000000210.500:16631): avc: denied { connect } for pid=24152 comm="syz.2.7293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 385.491120][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.511363][ T29] audit: type=1400 audit(2000000210.500:16632): avc: denied { write } for pid=24152 comm="syz.2.7293" laddr=fe80::a8aa:aaff:feaa:aa10 lport=53043 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 385.521812][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.547141][ T29] audit: type=1400 audit(2000000210.570:16633): avc: denied { create } for pid=24152 comm="syz.2.7293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 385.556961][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.556982][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.557002][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.557017][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.557092][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.557108][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.584434][T23916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.650983][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.661461][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.671466][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.681975][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.691962][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.702482][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.712312][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.722920][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.732798][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.743535][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.753368][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.763886][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.773780][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.784287][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.794118][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.804585][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.814423][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.824880][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.834778][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.845465][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.855372][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.865827][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.875677][T23916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 385.886114][T23916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.898997][T23916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.915830][T23916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.924574][T23916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.933435][T23916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.942173][T23916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.968247][T23962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.057144][ T29] audit: type=1326 audit(2000000211.180:16634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.3.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 386.085158][ T29] audit: type=1326 audit(2000000211.210:16635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24175 comm="syz.3.7303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 386.186015][T24196] loop3: detected capacity change from 0 to 256 [ 386.228385][T23962] veth0_vlan: entered promiscuous mode [ 386.243872][T24204] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 386.259281][T23962] veth1_vlan: entered promiscuous mode [ 386.310080][T23962] veth0_macvtap: entered promiscuous mode [ 386.318777][T23962] veth1_macvtap: entered promiscuous mode [ 386.331281][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.341837][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.351824][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.362395][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.372256][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.382797][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.392760][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.403251][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.413201][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.423686][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.433506][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.444089][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.453918][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.464456][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.474363][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.484784][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.494602][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.505144][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.514945][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.525498][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.535447][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.545899][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.555759][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.566205][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.576079][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.586534][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.599836][T23962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.612922][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.623556][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.633435][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.643973][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.653850][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.664291][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.674165][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.684726][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.694564][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.705110][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.714988][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.725422][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.735275][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.745723][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.755624][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.766149][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.775994][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.786495][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.796328][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.806761][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.816600][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.827060][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.837669][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.848532][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.858475][T23962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.869045][T23962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.881444][T23962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.895381][T23962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.904121][T23962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.912988][T23962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.921829][T23962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.235835][T24240] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 387.273265][T24246] loop1: detected capacity change from 0 to 512 [ 387.297041][T24246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.312715][T24246] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.331264][T24246] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.7329: corrupted inode contents [ 387.347717][T24246] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.7329: mark_inode_dirty error [ 387.363578][T24258] 9pnet_fd: p9_fd_create_tcp (24258): problem connecting socket to 127.0.0.1 [ 387.396169][T24246] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.7329: corrupted inode contents [ 387.423212][T24260] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.7329: corrupted inode contents [ 387.440726][T24257] netlink: 'syz.4.7332': attribute type 15 has an invalid length. [ 387.450883][T24257] netlink: 723 bytes leftover after parsing attributes in process `syz.4.7332'. [ 387.507295][T23962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.653275][T24288] 9pnet_fd: p9_fd_create_tcp (24288): problem connecting socket to 127.0.0.1 [ 387.729046][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7351'. [ 387.820769][T24297] loop1: detected capacity change from 0 to 512 [ 387.822106][T24306] loop3: detected capacity change from 0 to 512 [ 387.833709][T24297] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 387.869210][T24306] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 387.908248][T24297] loop1: detected capacity change from 0 to 512 [ 387.923008][T24302] netlink: 'syz.0.7350': attribute type 15 has an invalid length. [ 387.930997][T24302] netlink: 723 bytes leftover after parsing attributes in process `syz.0.7350'. [ 387.931091][T24297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.983660][T24297] EXT4-fs (loop1): 1 truncate cleaned up [ 388.007507][T24297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.036835][T24297] EXT4-fs error (device loop1): ext4_generic_delete_entry:2676: inode #2: block 13: comm syz.1.7351: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 388.094703][T24297] EXT4-fs (loop1): Remounting filesystem read-only [ 388.101327][T24297] EXT4-fs warning (device loop1): ext4_rename_delete:3738: inode #2: comm syz.1.7351: Deleting old file: nlink 4, error=-117 [ 388.119848][T24327] bond1: entered promiscuous mode [ 388.125012][T24327] bond1: entered allmulticast mode [ 388.130677][T24327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.195372][T23962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.222456][T24338] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 388.347772][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7375'. [ 388.446996][T24374] 9pnet_fd: p9_fd_create_tcp (24374): problem connecting socket to 127.0.0.1 [ 388.521469][T24377] netlink: 'syz.4.7378': attribute type 15 has an invalid length. [ 388.529365][T24377] netlink: 723 bytes leftover after parsing attributes in process `syz.4.7378'. [ 388.545124][T24389] program syz.0.7390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.571877][T24392] loop1: detected capacity change from 0 to 512 [ 388.589722][T24394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7393'. [ 388.619041][T24392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.638619][T24398] loop0: detected capacity change from 0 to 512 [ 388.654918][T24392] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.657103][T24398] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.7394: corrupted in-inode xattr: invalid ea_ino [ 388.684812][T24398] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.7394: couldn't read orphan inode 12 (err -117) [ 388.698688][T24398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.720222][T24398] syz.0.7394[24398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.720286][T24398] syz.0.7394[24398] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.745859][T24392] loop1: detected capacity change from 512 to 0 [ 388.790605][T24392] syz.1.7391: attempt to access beyond end of device [ 388.790605][T24392] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 388.831941][T24392] syz.1.7391: attempt to access beyond end of device [ 388.831941][T24392] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 388.842285][T24407] loop3: detected capacity change from 0 to 512 [ 388.876862][T24392] syz.1.7391: attempt to access beyond end of device [ 388.876862][T24392] loop1: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 388.906396][T24392] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 34: comm syz.1.7391: unable to read itable block [ 388.919531][T24392] syz.1.7391: attempt to access beyond end of device [ 388.919531][T24392] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 388.932906][T24392] buffer_io_error: 6 callbacks suppressed [ 388.932920][T24392] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 388.948422][T24392] EXT4-fs (loop1): I/O error while writing superblock [ 388.949870][T24407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.955275][T24392] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 389.006921][T24392] syz.1.7391: attempt to access beyond end of device [ 389.006921][T24392] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 389.020269][T24392] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.043387][T24407] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.057139][T24392] EXT4-fs (loop1): I/O error while writing superblock [ 389.124630][T23962] syz-executor: attempt to access beyond end of device [ 389.124630][T23962] loop1: rw=12288, sector=88, nr_sectors = 4 limit=0 [ 389.154744][T24407] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.7397: corrupted inode contents [ 389.195575][T24407] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.7397: mark_inode_dirty error [ 389.221116][T23962] syz-executor: attempt to access beyond end of device [ 389.221116][T23962] loop1: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 389.248970][T24407] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.7397: corrupted inode contents [ 389.269775][T24423] netlink: 'syz.2.7401': attribute type 29 has an invalid length. [ 389.279984][T23962] syz-executor: attempt to access beyond end of device [ 389.279984][T23962] loop1: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 389.289528][T24421] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.7397: corrupted inode contents [ 389.328105][T24425] loop2: detected capacity change from 0 to 256 [ 389.337713][T23962] syz-executor: attempt to access beyond end of device [ 389.337713][T23962] loop1: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 389.353649][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.355612][T23962] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 34: comm syz-executor: unable to read itable block [ 389.375930][T23962] syz-executor: attempt to access beyond end of device [ 389.375930][T23962] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 389.389388][T23962] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.401170][T23962] EXT4-fs (loop1): I/O error while writing superblock [ 389.408063][T23962] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 389.417013][T23962] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.428364][T23962] EXT4-fs (loop1): I/O error while writing superblock [ 389.434225][T24433] loop3: detected capacity change from 0 to 512 [ 389.435385][T23962] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor: mark_inode_dirty error [ 389.442367][T24433] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 389.453018][T23962] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.477478][T23962] EXT4-fs (loop1): I/O error while writing superblock [ 389.484542][ T50] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #3: block 34: comm kworker/u8:3: unable to read itable block [ 389.498643][ T50] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.506979][ T50] EXT4-fs (loop1): I/O error while writing superblock [ 389.513834][ T50] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #18: block 35: comm kworker/u8:3: unable to read itable block [ 389.532924][T23916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.535851][ T50] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.557216][ T50] EXT4-fs (loop1): I/O error while writing superblock [ 389.565390][ T50] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #2: block 34: comm kworker/u8:3: unable to read itable block [ 389.579567][ T50] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.595349][ T50] EXT4-fs (loop1): I/O error while writing superblock [ 389.604638][T23962] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.632169][T24441] loop0: detected capacity change from 0 to 1024 [ 389.639931][T23962] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 389.650011][T24395] Buffer I/O error on dev loop1, logical block 12, lost sync page write [ 389.669276][T24441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.727664][T24448] loop3: detected capacity change from 0 to 512 [ 389.750406][T23916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.757588][T24448] EXT4-fs (loop3): 1 truncate cleaned up [ 389.765804][T24448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.797454][T24448] ebt_limit: overflow, try lower: 570423552/2483027968 [ 389.810852][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.898808][T24460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7416'. [ 390.031417][T24467] loop3: detected capacity change from 0 to 512 [ 390.043358][T24467] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 390.123522][T24468] loop2: detected capacity change from 0 to 512 [ 390.131080][T24468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 390.146366][T24468] EXT4-fs (loop2): 1 truncate cleaned up [ 390.152820][T24468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.171686][T24468] EXT4-fs error (device loop2): ext4_generic_delete_entry:2676: inode #2: block 13: comm syz.2.7417: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 390.192141][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 390.192154][ T29] audit: type=1400 audit(2000000215.290:16663): avc: denied { rename } for pid=24462 comm="syz.2.7417" name="file6" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 390.232909][T24468] EXT4-fs (loop2): Remounting filesystem read-only [ 390.239553][T24468] EXT4-fs warning (device loop2): ext4_rename_delete:3738: inode #2: comm syz.2.7417: Deleting old file: nlink 4, error=-117 [ 390.367904][T24474] loop4: detected capacity change from 0 to 256 [ 390.438113][T24474] loop4: detected capacity change from 0 to 512 [ 390.478328][T24474] ext4: Unknown parameter 'nouser_xattr' [ 390.481623][T24478] loop3: detected capacity change from 0 to 256 [ 390.495873][T24478] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 390.521341][T12431] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 390.549476][T24474] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 390.603715][T24474] syzkaller0: entered promiscuous mode [ 390.609287][T24474] syzkaller0: entered allmulticast mode [ 390.617239][ T29] audit: type=1326 audit(2000000215.740:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.640917][ T29] audit: type=1326 audit(2000000215.740:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.695259][ T29] audit: type=1326 audit(2000000215.800:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.718997][ T29] audit: type=1326 audit(2000000215.800:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.742905][ T29] audit: type=1326 audit(2000000215.800:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.766642][ T29] audit: type=1326 audit(2000000215.800:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.790334][ T29] audit: type=1326 audit(2000000215.800:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd918eefbd9 code=0x7ffc0000 [ 390.813927][ T29] audit: type=1326 audit(2000000215.800:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd918ee6c27 code=0x7ffc0000 [ 390.837840][ T29] audit: type=1326 audit(2000000215.800:16672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24481 comm="syz.3.7424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd918e8b5c9 code=0x7ffc0000 [ 390.854451][T24485] loop3: detected capacity change from 0 to 512 [ 390.904275][T24485] EXT4-fs (loop3): 1 truncate cleaned up [ 390.913464][T24485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.928404][T22403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.961691][T24485] ebt_limit: overflow, try lower: 570423552/2483027968 [ 390.962911][T24491] loop0: detected capacity change from 0 to 2048 [ 390.989248][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.998832][T24495] loop4: detected capacity change from 0 to 1024 [ 391.010877][T24495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.024912][T24491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.046655][T24506] netlink: 'syz.2.7433': attribute type 11 has an invalid length. [ 391.059009][T23916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.075032][T23148] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.306547][T24521] loop2: detected capacity change from 0 to 512 [ 391.322561][T24521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.339865][T24521] EXT4-fs (loop2): 1 truncate cleaned up [ 391.346359][T24521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.367726][T24521] EXT4-fs error (device loop2): ext4_generic_delete_entry:2676: inode #2: block 13: comm syz.2.7437: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 391.388414][T24521] EXT4-fs (loop2): Remounting filesystem read-only [ 391.394950][T24521] EXT4-fs warning (device loop2): ext4_rename_delete:3738: inode #2: comm syz.2.7437: Deleting old file: nlink 4, error=-117 [ 391.747138][T12431] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.853630][T12431] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.911948][T12431] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.002236][T22403] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.013150][T24537] loop3: detected capacity change from 0 to 256 [ 392.033151][T12431] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.072112][T24537] loop3: detected capacity change from 0 to 512 [ 392.078700][T24537] ext4: Unknown parameter 'nouser_xattr' [ 392.111878][T24537] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 392.190456][T24550] loop0: detected capacity change from 0 to 2048 [ 392.218233][T24550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.220556][T24537] syzkaller0: entered promiscuous mode [ 392.235973][T24537] syzkaller0: entered allmulticast mode [ 392.275228][T12431] bridge_slave_1: left allmulticast mode [ 392.280930][T12431] bridge_slave_1: left promiscuous mode [ 392.286762][T12431] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.312077][T23916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.323521][T12431] bridge_slave_0: left allmulticast mode [ 392.329322][T12431] bridge_slave_0: left promiscuous mode [ 392.335157][T12431] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.418217][T24586] netlink: 'syz.0.7446': attribute type 11 has an invalid length. [ 392.551632][T12431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.568168][T12431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.582579][T12431] bond0 (unregistering): Released all slaves [ 392.592478][T12431] bond1 (unregistering): Released all slaves [ 392.712284][T24527] chnl_net:caif_netlink_parms(): no params data found [ 392.746970][T24635] loop3: detected capacity change from 0 to 512 [ 392.763331][T12431] hsr_slave_0: left promiscuous mode [ 392.769600][T24635] EXT4-fs (loop3): 1 truncate cleaned up [ 392.775809][T12431] hsr_slave_1: left promiscuous mode [ 392.781802][T12431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.787241][T24635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.789330][T12431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.809182][T12431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.816700][T12431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.827842][T12431] veth1_macvtap: left promiscuous mode [ 392.833345][T12431] veth0_macvtap: left promiscuous mode [ 392.839058][T12431] veth1_vlan: left promiscuous mode [ 392.844344][T12431] veth0_vlan: left promiscuous mode [ 392.938028][T24681] ebt_limit: overflow, try lower: 570423552/2483027968 [ 393.119599][T12431] team0 (unregistering): Port device team_slave_1 removed [ 393.132290][T12431] team0 (unregistering): Port device team_slave_0 removed [ 393.214309][T23178] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.230161][T24527] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.237532][T24527] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.250769][T24527] bridge_slave_0: entered allmulticast mode [ 393.257713][T24527] bridge_slave_0: entered promiscuous mode [ 393.265268][T24527] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.272447][T24527] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.284174][T24527] bridge_slave_1: entered allmulticast mode [ 393.291415][T24527] bridge_slave_1: entered promiscuous mode [ 393.323419][T24527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.346475][T24527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.375863][T24527] team0: Port device team_slave_0 added [ 393.383069][T24527] team0: Port device team_slave_1 added [ 393.406467][T24527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.413513][T24527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.439444][T24527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.461721][T24703] loop4: detected capacity change from 0 to 256 [ 393.469524][T24527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.476610][T24527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.502701][T24527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.529709][T24703] loop4: detected capacity change from 0 to 512 [ 393.536478][T24703] ext4: Unknown parameter 'nouser_xattr' [ 393.573023][T24527] hsr_slave_0: entered promiscuous mode [ 393.583076][T24527] hsr_slave_1: entered promiscuous mode [ 393.589191][T24527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.596986][T24527] Cannot create hsr debugfs directory [ 393.609544][T24703] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 393.663142][T24703] syzkaller0: entered promiscuous mode [ 393.668802][T24703] syzkaller0: entered allmulticast mode [ 394.021060][T24745] netlink: 'syz.0.7483': attribute type 1 has an invalid length. [ 394.028917][T24745] netlink: 2776 bytes leftover after parsing attributes in process `syz.0.7483'. [ 394.050763][T24527] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.067124][T24527] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 394.085409][T24527] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 394.101353][T24527] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.131262][T24527] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.138432][T24527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.187183][T24527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.197509][T24758] loop3: detected capacity change from 0 to 256 [ 394.204057][ T3159] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.221177][T24527] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.233569][T24758] loop3: detected capacity change from 0 to 512 [ 394.243305][T24758] ext4: Unknown parameter 'nouser_xattr' [ 394.246100][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.256098][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.266649][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.273755][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.294006][T24758] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 394.327402][T24758] syzkaller0: entered promiscuous mode [ 394.332933][T24758] syzkaller0: entered allmulticast mode [ 394.382708][T24527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.469615][T24527] veth0_vlan: entered promiscuous mode [ 394.479491][T24527] veth1_vlan: entered promiscuous mode [ 394.500428][T24527] veth0_macvtap: entered promiscuous mode [ 394.508982][T24527] veth1_macvtap: entered promiscuous mode [ 394.526161][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.536745][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.546632][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.557153][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.567036][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.577497][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.587395][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.597928][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.607772][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.618257][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.628114][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.638665][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.648542][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.659078][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.668999][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.679449][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.689296][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.699732][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.709550][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.719985][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.729860][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.740297][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.750129][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.760687][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.770538][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.781010][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.793165][T24527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.814522][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.825213][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.835189][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.845712][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.855707][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.866206][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.876054][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.886512][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.896379][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.906917][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.916787][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.927325][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.937177][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.947653][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.957539][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.968000][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.977851][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.988365][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.998353][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.008940][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.018813][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.029276][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.039161][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.049633][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.059503][T24527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.069957][T24527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.082537][T24527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.091643][T24527] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.100540][T24527] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.109356][T24527] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.118169][T24527] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.127740][T24881] ================================================================== [ 395.135867][T24881] BUG: KCSAN: data-race in exec_mmap / mm_update_next_owner [ 395.143183][T24881] [ 395.145503][T24881] write to 0xffff88810a963680 of 8 bytes by task 24880 on cpu 1: [ 395.153241][T24881] exec_mmap+0x14f/0x430 [ 395.157487][T24881] begin_new_exec+0xac9/0x1080 [ 395.162278][T24881] load_elf_binary+0x641/0x1870 [ 395.167134][T24881] bprm_execve+0x4e6/0xc60 [ 395.171556][T24881] kernel_execve+0x60f/0x670 [ 395.176153][T24881] call_usermodehelper_exec_async+0x19d/0x250 [ 395.182231][T24881] ret_from_fork+0x4b/0x60 [ 395.186741][T24881] ret_from_fork_asm+0x1a/0x30 [ 395.191542][T24881] [ 395.193858][T24881] read to 0xffff88810a963680 of 8 bytes by task 24881 on cpu 0: [ 395.201485][T24881] mm_update_next_owner+0x1c9/0x450 [ 395.206774][T24881] exit_mm+0xdc/0x190 [ 395.210756][T24881] do_exit+0x556/0x1710 [ 395.214943][T24881] do_group_exit+0x142/0x150 [ 395.219631][T24881] __x64_sys_exit_group+0x1f/0x20 [ 395.224748][T24881] x64_sys_call+0x27f9/0x2d70 [ 395.229435][T24881] do_syscall_64+0xc9/0x1c0 [ 395.233944][T24881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.239841][T24881] [ 395.242169][T24881] value changed: 0x0000000000000000 -> 0xffff888112a78540 [ 395.249393][T24881] [ 395.251722][T24881] Reported by Kernel Concurrency Sanitizer on: [ 395.257865][T24881] CPU: 0 PID: 24881 Comm: syz.3.7502 Tainted: G W 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 395.269493][T24881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 395.279547][T24881] ==================================================================